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What is claimed is: 

1 . A server system that processes an incoming request for information from 
a user over network, the server system comprising: 

one or more source servers that store information; 
5 a first server, communicatively coupled to the one or more source servers 
and to the network; that receives the incoming request from the network; and 
the first server testing the the incoming request for an indicia contained 
within the request that the request is not proper for the source servers to respond 
to the request, and passing the incoming request to the one or more source 
10 servers when the incoming request is valid. 

2. The system of claim 1 , the one or more source servers transmitting 
information to the first server in response to the incoming request; and 

the first server retransmitting the information to the user. 

15 

3. The system of claim 1 wherein the first server does not pass the incoming 
request to the one or more source servers when the incoming request is an 
indicia that the request is not proper for the source servers to respond to the 
request. 

20 

4. The system of claim 1 wherein an incoming request is detemined to be 
not proper when the when the request is for access to a particular resource. 



5. A computing system that preprocesses and monitors incoming requests 
25 for information from a user over network, the information stored on one or more 
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source servers communicatively coupled to the computing system, the 
computing system comprising: 

a network input port that receives the request; 

a source server port, communicatively coupled to the one or more source 
5 servers, that transmits information to and from the source servers; 

a intrusion detection mechanism communicatively coupled to the network 
input port; 

the intrusion detection mechanism receiving the incoming request from 
the network and checking the the incoming request for indicia of an improper 
10 request from information associated with the incoming request; 

the intrusion detection mechanism transmitting the incoming request to 
the one or more source servers when the indicia associated with the incoming 
request is valid. 

15 6. The system of claim 5, the one or more source servers transmitting 
information to the source server port in response to the incoming request; and 
the system retransmitting the information to the user. 

7. The system of claim 5 wherein the intrusion detection mechanism does 
20 not pass the incoming request to the one or more source servers when the 

incoming request has an indicia that it is not proper. 

8. The system of claim 5 wherein an incoming request has an indicia that it 
is not proper when requesting access to a particular resource. 

25 
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9. A method for preprocessing an incoming request for information from a 
user over network, the information stored on one or more source servers 
communicatively coupled to a computing system, the method comprising: 

receiving the request on the computing system; 
5 determining if the incoming request is indicia of not being proper, the 
indicia associated with the incoming request; 

selectively not transmitting the incoming request to the one or more 
source servers when the incoming request is contains indicia of not being proper. 

10 10. The method of claim 9 wherein the step of determining is performed by a 
software resident on the computing system. 

1 1 . The method of claim 9 further comprising: 

15 transmitting information from the one or more source servers to the 
computer system in response to the incoming request; and 

the computing system retransmitting the information to the user. 

12. The method of claim 9 wherein an incoming request is contains indicia of 
20 not being proper when requesting access to a particular resource. 

13. A computer program product on a computer usable medium, the 
computer usable medium having a computer usable program embodied therein 
for preprocessing an incoming request for information from a user over network, 

25 the information stored on one or more source servers communicatively coupled 
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to a computing system, the computer usable program including: 

instructions for receiving the request on the computing system; 

5 instructions for determining if the incoming request contains indicia of not 

being proper; 

instructions for selectively transmitting the incoming request to the one or 
more source servers when the incoming request contains indicia of being proper. 

10 

14. The computer program product of claim 13 wherein the instructions for 
determining are performed by a software resident on the computing system. 

15. The computer program product of claim 13 further comprising: 

15 

instructions for transmitting information from the one or more source 
servers to the computer system in response to the incoming request; and 

the computing system having instructions for retransmitting the 
20 information to the user. 

16. The computer program product of claim 13 wherein an incoming request 
is invalid when requesting access to a particular resource. 

25 17. A server system that processes an incoming request for information from 
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a user over network, the server system comprising: 

one or more source servers that store information; 

a first server, communicatively coupled to the one or more source servers 
and to the network; that receives the incoming request from the network; and 
5 the first server detecting an intrusion of the incoming request in the 
context of prior requests and based on indicia of the incoming request being 
proper, such indicia being associated with the incoming request, and 

the first server passing the incoming request to the one or more source 
servers when the indicia associated with the incoming request indicates that the 
10 incoming request is proper. 

18. The server of claim 17, wherein the context of prior requests comprises 
requests for the same information. 

15 19. The server of claim 1 7, wherein the context of prior requests comprises 
requests for different information from a common computing device coupled over 
the network. 

20. The server of claim 1 7, wherein the context of prior requests is based on a 
20 number of requests for the same information. 

21 . The server of claim 1 7, wherein the context of prior requests is based on a 
number of requests from a particular IP address. 

25 22. The server of claim 1 7, wherein the context of prior requests is based on a 
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number of requests for information from a particular IP address in a particular 
amount of time. 
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